Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/tirUhgB2oQ6srNaWPC8WxTIcyFY.roa
File: tirUhgB2oQ6srNaWPC8WxTIcyFY.roa (raw, json)
Hash identifier: J03ckLEQGOwc2OolmrqNy/fPqtvsjUJGHsPAowrI7zY=
Subject key identifier: B6:2A:D4:86:00:76:A1:0E:AC:AC:D6:96:3C:2F:16:C5:32:1C:C8:56
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01850F9A60887D50C48471DAAF96FBBA32AB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/tirUhgB2oQ6srNaWPC8WxTIcyFY.roa
Signing time: Wed 14 Dec 2022 07:47:33 +0000
ROA not before: Wed 14 Dec 2022 07:47:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
212.193.14.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.207.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
194.135.30.0/24 maxlen: 24
194.87.250.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.164.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.171.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
212.192.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0f:9a:60:88:7d:50:c4:84:71:da:af:96:fb:ba:32:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 14 07:47:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b62ad4860076a10eacacd6963c2f16c5321cc856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a7:3d:b5:77:d8:8e:6e:ba:95:d6:e9:93:4b:
dd:de:83:46:7a:5f:99:d5:c8:d2:fb:a3:7b:54:9c:
73:b3:ec:ba:b8:45:17:9e:63:34:e1:48:2d:39:ff:
7f:32:ba:1c:0a:05:28:a7:e6:21:b3:fc:e2:8a:6f:
30:85:1e:12:26:e2:b9:90:b5:70:8b:40:b1:8e:28:
e1:71:83:8c:ff:ba:08:96:b3:bc:38:76:76:3d:21:
25:93:c0:b3:fd:b4:28:ed:f5:ba:74:f7:fb:59:24:
11:0f:da:8f:88:ec:c0:d5:e1:10:8e:92:65:7d:63:
47:16:d7:a4:db:96:76:52:5e:92:7e:58:4c:b9:e8:
60:46:5c:be:70:2a:35:2f:99:79:9f:62:99:99:60:
cd:26:c4:fd:0a:c6:45:96:e8:b1:ef:34:cc:61:3e:
78:b8:fd:d7:6d:c1:8c:a4:a2:63:a4:16:ac:15:07:
76:f0:6e:e8:2b:41:23:6c:a7:ec:7f:a8:69:c2:76:
12:5e:03:00:3b:70:a6:76:6a:c2:a4:65:cb:14:ac:
b4:12:1a:af:42:e1:67:21:b5:aa:d2:e7:6f:6b:7f:
cf:5d:c0:da:72:13:d8:0a:d1:fe:61:af:7c:60:69:
5a:3a:94:ad:42:24:77:81:3c:60:a7:57:8c:bc:36:
ba:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2A:D4:86:00:76:A1:0E:AC:AC:D6:96:3C:2F:16:C5:32:1C:C8:56
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/tirUhgB2oQ6srNaWPC8WxTIcyFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
192.124.172.0/24
192.124.178.0/24
192.124.180.0/22
193.124.3.0/24
193.124.9.0/24
193.124.18.0/24
193.124.201.0/24
193.124.203.0/24
193.124.207.0/24
194.58.38.0/24
194.58.42.0/23
194.58.45.0-194.58.47.255
194.58.59.0/24
194.87.2.0/24
194.87.7.0/24
194.87.24.0/22
194.87.56.0/24
194.87.76.0/24
194.87.82.0/23
194.87.104.0/24
194.87.108.0/24
194.87.118.0/24
194.87.123.0/24
194.87.136.0/24
194.87.149.0/24
194.87.160.0/23
194.87.163.0-194.87.165.255
194.87.171.0-194.87.172.255
194.87.176.0/24
194.87.198.0/23
194.87.202.0/24
194.87.207.0-194.87.209.255
194.87.222.0/23
194.87.233.0/24
194.87.250.0/24
194.135.30.0/24
195.58.50.0/24
195.58.56.0/21
195.133.12.0/24
195.133.30.0/24
195.133.55.0/24
195.133.195.0/24
212.192.10.0/24
212.192.210.0/24
212.192.222.0/24
212.193.0.0/24
212.193.12.0/24
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
41:df:c2:bb:a2:c4:83:a5:39:ea:c9:f6:a2:70:20:12:c2:1d:
38:8d:08:6d:c7:d5:c8:e2:41:93:65:1e:78:dc:2e:87:32:0e:
e8:ad:83:06:7e:6b:34:d9:14:31:81:2b:16:72:97:7f:67:8a:
40:1c:a2:a4:f6:ab:bd:78:96:00:ac:70:e2:8e:89:23:85:a8:
ea:48:68:bb:5e:8a:a4:34:13:7b:6b:9a:d6:e4:33:f4:61:6f:
cd:ef:76:89:3f:9b:50:a1:06:13:dc:47:40:c2:18:05:89:3a:
15:3f:31:6d:59:9b:41:41:d7:32:8d:76:bf:85:06:da:ff:86:
da:93:01:4f:38:29:90:74:d4:57:4e:0e:6d:57:ac:7e:f2:94:
27:f1:12:7b:ef:fb:db:98:51:4a:e6:ef:d8:70:b8:ac:97:6c:
72:30:cb:24:2b:91:e8:5f:bf:1f:af:98:54:66:6c:ab:c7:ae:
e3:32:c5:6a:e9:dc:e5:5c:aa:74:42:d4:be:55:6e:f2:82:0f:
6c:12:7f:d8:3e:58:42:9c:a1:ef:dd:4a:4e:31:1b:a4:45:fc:
9b:72:54:9c:53:94:fb:07:70:e0:4e:71:51:37:a7:a0:f5:24:
c4:97:d6:78:a8:12:a5:3c:31:e8:1e:e2:54:48:6c:d8:49:bf:
56:63:30:06
-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgISAYUPmmCIfVDEhHHar5b7ujKrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIxMjE0MDc0NzMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjJhZDQ4NjAwNzZhMTBlYWNhY2Q2OTYzYzJmMTZjNTMyMWNjODU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhac9tXfYjm66ldbpk0vd3oNGel+Z
1cjS+6N7VJxzs+y6uEUXnmM04UgtOf9/MrocCgUop+Yhs/ziim8whR4SJuK5kLVw
i0CxjijhcYOM/7oIlrO8OHZ2PSElk8Cz/bQo7fW6dPf7WSQRD9qPiOzA1eEQjpJl
fWNHFtek25Z2Ul6SflhMuehgRly+cCo1L5l5n2KZmWDNJsT9CsZFluix7zTMYT54
uP3XbcGMpKJjpBasFQd28G7oK0EjbKfsf6hpwnYSXgMAO3CmdmrCpGXLFKy0Ehqv
QuFnIbWq0udva3/PXcDachPYCtH+Ya98YGlaOpStQiR3gTxgp1eMvDa6EQIDAQAB
o4IDUzCCA08wHQYDVR0OBBYEFLYq1IYAdqEOrKzWljwvFsUyHMhWMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvdGlyVWhnQjJvUTZzck5hV1BDOFd4VEljeUZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBZwYIKwYBBQUHAQcBAf8EggFWMIIBUjCCAU4EAgABMIIB
RgMEAD5M5wMEAMB8rAMEAMB8sgMEAsB8tAMEAMF8AwMEAMF8CQMEAMF8EgMEAMF8
yQMEAMF8ywMEAMF8zwMEAMI6JgMEAcI6KjAMAwQAwjotAwQEwjogAwQAwjo7AwQA
wlcCAwQAwlcHAwQCwlcYAwQAwlc4AwQAwldMAwQBwldSAwQAwldoAwQAwldsAwQA
wld2AwQAwld7AwQAwleIAwQAwleVAwQBwlegMAwDBADCV6MDBAHCV6QwDAMEAMJX
qwMEAMJXrAMEAMJXsAMEAcJXxgMEAMJXyjAMAwQAwlfPAwQBwlfQAwQBwlfeAwQA
wlfpAwQAwlf6AwQAwoceAwQAwzoyAwQDwzo4AwQAw4UMAwQAw4UeAwQAw4U3AwQA
w4XDAwQA1MAKAwQA1MDSAwQA1MDeAwQA1MEAAwQA1MEMAwQA1MEOMA0GCSqGSIb3
DQEBCwUAA4IBAQBB38K7osSDpTnqyfaicCASwh04jQhtx9XI4kGTZR543C6HMg7o
rYMGfms02RQxgSsWcpd/Z4pAHKKk9qu9eJYArHDijokjhajqSGi7XoqkNBN7a5rW
5DP0YW/N73aJP5tQoQYT3EdAwhgFiToVPzFtWZtBQdcyjXa/hQba/4bakwFPOCmQ
dNRXTg5tV6x+8pQn8RJ77/vbmFFK5u/YcLisl2xyMMskK5HoX78fr5hUZmyrx67j
MsVq6dzlXKp0QtS+VW7ygg9sEn/YPlhCnKHv3UpOMRukRfybclScU5T7B3DgTnFR
N6eg9STEl9Z4qBKlPDHoHuJUSGzYSb9WYzAG
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:49 2024 by rpki-client on console-ams.rpki-client.org